Template:Nginx SSL directives

ssl_certificate /etc/nginx/ssl/example.pem;

ssl_certificate_key /etc/nginx/ssl/example.key;

ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;

ssl_prefer_server_ciphers on; server ciphers should be preferred over client ciphers when using the SSLv3 and TLS protocols

ssl_certificate /etc/letsencrypt/live/www.example.com/fullchain.pem;

ssl_certificate_key /etc/letsencrypt/live/www.example.com/privkey.pem;

ssl_session_timeout

ssl_ciphers

http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_prefer_server_ciphers